Privacy Policy - Gardeners Upper Norwood

This Privacy Policy explains how Gardeners Upper Norwood collects, uses, stores, and protects personal data. It applies to all Gardeners Upper Norwood customers in the area, including people who enquire about our gardening services, request quotations, book visits, or receive ongoing garden maintenance. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to individuals who interact with Gardeners Upper Norwood in relation to our services. That includes customers, prospective customers, residents, landlords, property managers, and anyone else who contacts us or receives services from us in the Upper Norwood area. By using our services or providing us with personal information, you acknowledge that your data will be processed as described in this notice.

2. Information we collect

We only collect personal data that is necessary for our services and business operations. The information we may collect includes:

Identity details such as your name.
Contact details such as your email address, telephone number, and service address.
Service information such as details of the gardening work requested, site access arrangements, preferred visit times, and service history.
Billing and payment information where needed for invoicing, accounting, and payment processing.
Communication records such as emails, text messages, call notes, and feedback.
Technical and usage data if you interact with our digital systems, such as basic device or browser information, where applicable.

We do not intentionally collect special category data unless you voluntarily provide it and it is necessary for a specific lawful purpose. If such information is shared, we will treat it with additional care and only process it where permitted by law.

3. How we use personal data

Gardeners Upper Norwood uses personal data for the following purposes:

To provide quotations, arrange visits, and deliver gardening services.
To manage customer accounts, schedules, and service records.
To communicate with you about bookings, service updates, and administrative matters.
To issue invoices, process payments, and maintain financial records.
To handle complaints, queries, and service-related follow-ups.
To improve our customer service, operational efficiency, and service quality.
To comply with legal, regulatory, insurance, and tax obligations.

We will not use your personal data for purposes that are incompatible with the reasons for which it was collected, unless we are otherwise permitted or required by law.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis for processing personal information. Depending on the context, Gardeners Upper Norwood relies on the following lawful bases:

Performance of a contract

We process personal data when it is necessary to provide a quotation, deliver gardening services, manage bookings, and complete billing obligations. If you ask us to carry out work, this is a contractual relationship or a step taken before entering into one.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This can include managing customer relationships, keeping service records, improving our services, and protecting our business from fraud or misuse.

Legal obligation

We may process and retain certain information because the law requires us to do so. This includes tax, accounting, insurance, and record-keeping obligations.

Consent

In limited situations, we may rely on your consent, for example where you choose to provide optional information or agree to a specific type of communication. Where consent is used, you may withdraw it at any time. Withdrawal will not affect processing already carried out lawfully before that point.

5. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, and to meet legal, contractual, and operational requirements. Retention periods vary depending on the type of information and the reason for processing.

Customer service records are retained for as long as needed to manage the relationship and address any follow-up issues.
Financial records are kept in line with tax and accounting laws.
Communication records are retained for a reasonable period to support service continuity and dispute resolution.
Superseded or unnecessary information is deleted or securely anonymised when no longer required.

When retention is no longer necessary, we will take steps to securely delete, anonymise, or archive the data in accordance with our retention practices. We regularly review stored information to ensure it is not kept longer than needed.

6. Data processors and third parties

Gardeners Upper Norwood may use carefully selected third-party service providers, also known as processors, to help us run our business. These processors act on our instructions and are required to protect your data and use it only for agreed purposes.

Examples of processors may include:

IT and cloud storage providers.
Accounting and invoicing systems.
Payment processing providers.
Communication and scheduling tools.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also share data with public authorities, regulators, or law enforcement where required by law. Any sharing is limited to what is necessary and lawful. We do not sell personal data.

7. International transfers

If a processor stores or accesses data outside the United Kingdom, we will take appropriate safeguards to ensure that your personal information remains protected. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms where applicable.

8. Security of personal data

We use appropriate technical and organisational measures to help protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricting data access to people who need it for legitimate business purposes.

While no system can be guaranteed to be completely secure, we take reasonable steps to protect the information entrusted to us and to respond promptly to any suspected incident.

9. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions or exceptions. They include:

Right of access – you may ask for confirmation of whether we process your data and request a copy of it.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – you may ask us to delete your data in certain circumstances.
Right to restrict processing – you may ask us to limit how we use your data in specific situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request a copy of certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you believe your rights have been infringed, you also have the right to raise concerns with the relevant data protection authority. We encourage you to review your rights carefully and contact us if you believe something needs to be corrected or explained.

10. Children’s data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children unless it is unavoidable and lawful in a specific context. If we become aware that we have collected data from a child without appropriate authority, we will take reasonable steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

12. Summary of our approach

Gardeners Upper Norwood is committed to processing personal data responsibly and only where there is a valid reason to do so. We collect the minimum amount of information needed to provide gardening services, communicate effectively, meet our legal obligations, and maintain accurate records. We use processors only when necessary, apply appropriate safeguards, and respect your rights under data protection law.

This Privacy Policy applies to all Gardeners Upper Norwood customers in the area. By keeping our practices transparent and proportionate, we aim to maintain trust and ensure that personal data is treated with care, respect, and accountability.